I've run into this from a variety of sources, from bluesky links to external links on YouTube and most annoyingly DuckDuckGo bangs (particularly !ytmusic), some redirects appear to cause Orion to load the intended page without properly updating the current state. This often causes scripts and styles to fail to load correctly, and causes settings and site data for the source origin to be used, which may potentially be exploitable by a malicious website.
Attached is a brief demonstration from a bluesky post redirecting to github:
And for convenience, a link to the bluesky post:
https://bsky.app/profile/rich-harris.dev/post/3m3acgngfas2g
In addition to the visual confirmation of Orion using site settings for "go.bsky.app", my zoom preference and logged in session on GitHub are not loaded.
Orion should properly follow the redirect, display "github.com" in the URL bar, and use settings and cookies for "github.com", not "go.bsky.app".
Version 1.0.4 (143), WebKit 624.1.2.19.2 | MacBook Pro (macOS Tahoe 26.3.1 build 25D2128)
